[CRA][WS4] Support period declaration and risk assessment (M-012, M-013)

[ajlennon]

Workstream

WS4 — Governance and documentation

Programme: https://github.com/DynamicDevices/mender-rt1180-zephyr/blob/main/mender-mcu-integration/PROJECT-NOTES.md#ws4--governance-and-documentation · Parent: #1

Milestones

ID	Milestone	Target	Status
M-012	Support period declaration	2026 Q3	Open
M-013	Risk assessment (product-level)	Pre-production	Open

Definition of done

• M-012: Support period template filled, version-controlled, published to customers (≥ 5 years unless justified shorter per Art. 13(8))
• M-013: Product risk register signed off — network exposure, OTA trust chain, key storage, third-party components, supply-chain latency; mitigations linked to WS1–WS3 milestones; legal review before conformity claims

Templates: Support period declaration, Risk assessment placeholder

Dependencies

• Product line naming and go-to-market inputs from legal/business
• Technical file checklist (M-014) references both items